CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
bded49f568cb4759bb9186390daebe2bf9775d8351bedf86f08f11f3ca01c337.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bded49f568cb4759bb9186390daebe2bf9775d8351bedf86f08f11f3ca01c337.dll
Resource
win10v2004-20220812-en
Target
bded49f568cb4759bb9186390daebe2bf9775d8351bedf86f08f11f3ca01c337
Size
104KB
MD5
41ba6034af36f8c292fdaec5f5300dd4
SHA1
66a861b00108ce56790371b06a529951567ef463
SHA256
bded49f568cb4759bb9186390daebe2bf9775d8351bedf86f08f11f3ca01c337
SHA512
c9a5d8f43345330e5d74612f68f03fdf300a715be892d00886da242dea96acdc5b97aedf5cd02e77745cb931f048b41dd7c099e3f45dcc9dda3a80d17d9aa056
SSDEEP
1536:jt+xVKz+tjjibQRmNWYjA0tvZttOfIh+t2Ozqbg2wgfWjI8:jCwz+tnHYZ0wFst2OmbgGe08
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
srand
time
_vsnprintf
tolower
strrchr
_except_handler3
memcpy
rand
malloc
free
exit
strncpy
wcsstr
wcscpy
wcsncat
strstr
wcslen
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
??3@YAXPAX@Z
strlen
sprintf
memset
_strcmpi
_strupr
lstrlenA
MultiByteToWideChar
GetModuleHandleA
GetProcessHeap
HeapAlloc
SetFilePointer
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
GetTempPathA
DeleteFileA
GetFileSize
ReadFile
WideCharToMultiByte
GetFileAttributesW
GetPrivateProfileStringA
Sleep
LoadLibraryA
FreeLibrary
GetWindow
GetClassNameW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
GetDC
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE